Re: rpcclient and NTLMV2 authentication

On Wed, 2010-09-29 at 13:52 +0100, keith Fayne wrote:
> I've seen various notes on this subject, but can't find a definitive answer.
> 
> Does rpcclient support NTLMv2 authentication ?
> 
> i.e if the AD server is setup to send NTLMv2 responses only (and reject LM
> and NTLM) can I still connect with rpcclient ?

rpcclient will honour the same setting in the smb.conf as smbclient -
'client ntlmv2 auth = yes' should do it.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.

--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: samba with AD help.

This reminded me of something:

Solaris is bundled with Kerberos.   However, with sunfreeware samba you may
have also installed Kerberos packages from sun freeware.  Assuming the PATH
is let for /usr/local/bin:/usr/local/sbin:$PATH and LD_LIBRARY_PATH is set
/usr/local/lib:....  you should be using the sunfreeware versions of
software rather than the sun versions.

I don't know if sunfreeware Kerberos uses the same config files as sun
Kerberos-  which means you may be have not configured the correct files.

On a related note, 

Sunfreeware samba uses /usr/local/etc/smb.conf  (or something close to that)
by default.
The solaris bundled samba uses /etc/sfw/smb.conf

If you type "which testparm" are you running the correct testparm?
When you run "testparm -v" is it finding the correct smb.conf?

Or maybe you already sym linked your smb.conf file.

-----Original Message-----
From: samba-bounces <at> lists.samba.org [mailto:samba-bounces <at> lists.samba.org]
On Behalf Of Max León
Sent: Wednesday, September 29, 2010 8:22 PM
To: samba <at> lists.samba.org
Subject: Re: [Samba] samba with AD help.

Can you post the global part of your smb.conf, your nsswitch and your 

Re: samba with AD help.

yes sunfreeware samba installed under

/usr/local/samba

configuration file

/usr/local/samba/lib  i exported this lib PATH

also the testparm is under /usr/local/samba/bin/

i exicuted this testparm..that shows the sunfreeware samba's smb.conf
settings.

On Fri, Oct 1, 2010 at 2:22 PM, Gaiseric Vandal
<gaiseric.vandal <at> gmail.com>wrote:

> This reminded me of something:
>
> Solaris is bundled with Kerberos.   However, with sunfreeware samba you may
> have also installed Kerberos packages from sun freeware.  Assuming the PATH
> is let for /usr/local/bin:/usr/local/sbin:$PATH and LD_LIBRARY_PATH is set
> /usr/local/lib:....  you should be using the sunfreeware versions of
> software rather than the sun versions.
>
> I don't know if sunfreeware Kerberos uses the same config files as sun
> Kerberos-  which means you may be have not configured the correct files.
>
> On a related note,
>
> Sunfreeware samba uses /usr/local/etc/smb.conf  (or something close to

Re: samba with AD help.

But your output shows

     params.c:pm_process() - Processing configuration file  
"/etc/sfw/smb.conf"

On 10/01/2010 07:26 AM, Ben George wrote:
>
> yes sunfreeware samba installed under
>
> /usr/local/samba
>
> configuration file
>
> /usr/local/samba/lib  i exported this lib PATH
>
> also the testparm is under /usr/local/samba/bin/
>
> i exicuted this testparm..that shows the sunfreeware samba's smb.conf 
> settings.
>
>
>
>
> On Fri, Oct 1, 2010 at 2:22 PM, Gaiseric Vandal 
> <gaiseric.vandal <at> gmail.com <mailto:gaiseric.vandal <at> gmail.com>> wrote:
>
>     This reminded me of something:
>
>     Solaris is bundled with Kerberos.   However, with sunfreeware
>     samba you may

Re: samba with AD help.

Ho that's first mail na...

after that i started the net join from /usr/local/samba/bin

at first i mistakenly choose default net join..that's Y

On Fri, Oct 1, 2010 at 5:09 PM, Gaiseric Vandal
<gaiseric.vandal <at> gmail.com>wrote:

>  But your output shows
>
>
>     params.c:pm_process() - Processing configuration file
> "/etc/sfw/smb.conf"
>
>
>
>
>
> On 10/01/2010 07:26 AM, Ben George wrote:
>
>
> yes sunfreeware samba installed under
>
> /usr/local/samba
>
> configuration file
>
> /usr/local/samba/lib  i exported this lib PATH
>

File permissions getting destroyed with M$ software on ZFS

  All,
     Running Samba 3.5.4 on Solaris 10 with ZFS file system.  I have 
issues where we have shared group folders.  In these folders a userA in 
GroupA create file just fine with the correct inherited permissions 
660.  Problem is when userB in GroupA reads and modifies that file, with 
M$ office apps, the permissions get whacked to 060+ and the file becomes 
read only by everyone.
    I did google this and found exactly someone else with the same 
problem with a fix! But the fix is not working for me, so looking for 
some more help and incite to this problem.

The following are the two URLs I found which looked like a fix to my 
problem:

http://lists.samba.org/archive/samba/2008-November/145094.html
https://bugzilla.samba.org/show_bug.cgi?id=6050

I have implemented those settings, but I still see the problem of the 
file permissions getting whacked.

Here is my conf file:

[global]
     workgroup = ENGR_DOM
     server string = Samba Server
     interfaces = e1000g0, lo0
     bind interfaces only = Yes
     security = DOMAIN
     passdb backend = smbpasswd
     client NTLMv2 auth = Yes

add printers in Solaris 10 sparse zone

Hi all,

I have samba installed in a Solaris 10 sparse zone but I am having no luck adding printers in the zone so they
could be accesses through the Samba server.

The jetdirect software (hppi) fails with the error mknod: not owner; and chmod: WARNING: can't access
/dev/≤printer name>

I've created the device (/dev/≤printer_name> in the global zone. I've added it to the zone using zonecfg
but it does not appear in the zone when I list the contents of /dev.

I am planning on moving our main samba server, currently on Solaris 9) to a solaris 10 zone but I will need to
offer printing from samba.

Any suggestions would be appreciated.

~~~~~~~~~~~~~~~~~~~~~~~
Daulton Theodore
Systems Department,Carleton University Library
Email: daultontheodore <at> cunet.carleton.ca<mailto:daulton_theodore <at> carleton.ca>
Vmail: (613) 520-2600 ext:8352

--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

how do I setup a second samba4 DC with replication, etc?

I have 1 samba4 server setup as a domain controller for FOO.COM.  I want to add
a second for redundancy.  I really don't want to mess this up, and I can't find
a clear guide online.  Can anyone tell me the proper commands?

Thanks.

-Aaron
--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Add Samba Events To Windows Event Viewer

I'm using samba to control remote services on a domain (using net rpc). 
It works great. However, I'd like to be able to write an event when I 
need to restart a service or I poll a counter. Can I do this from a 
Linux box to a Windows server via Samba? If so, how?

Thx
--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: File permissions getting destroyed with M$ software on ZFS

  Well,
     I think I got it fixed, but not sure if it is the correct way.  
This is what my share ens looks like now:

[ens]
     comment = ENS Groups
     path = /XKA2/admin/ENS
     valid users = +admin
     force group = admin
     read only = No
     create mask = 0770
     force create mode = 0770
     security mask = 0770
     directory mask = 02770
     inherit permissions = Yes
     inherit acls = Yes
     nt acl support = No
     map archive = No
     map readonly = permissions
     store dos attributes = Yes
     vfs objects = zfsacl
     nfs4:acedup = merge
     nfs4:mode = special

I changed "nt acl support" to No.

On 10/1/10 8:15 AM, CJ Keist wrote:
>  All,
>     Running Samba 3.5.4 on Solaris 10 with ZFS file system.  I have 
> issues where we have shared group folders.  In these folders a userA